On Sun, 2013-04-14 at 09:13 +0200, Jerome Renard wrote: > Hi > > On Sat, Apr 13, 2013 at 8:12 AM, Jerome Renard <[email protected]> > wrote: > [...] > > However if I activate dynsearchtype (dynsearchtype="on") I get a > > "Called LogError, msg: error during parsing file rsyslog.conf [...]" > > without any more details. Using RSYSLOG_DEBUG="LogFuncFlow" does not > > give any interesting details either here. > > > > In omelasticsearch.c, the code which handles dynsearch* params calls > > templates in a given order. > > > > So if I follow the logic in BEGINnewActInst I should get > > dynsearchindex : 1, dynsearchtype : 2, dynbulkid : 3 but this does not > > seem to work. > > > > Is the logic for calling templates different ? Did I overlook something ? > > > > In case it is helpful to someone in the future, I found the problem. > > The problem comes from CONF_OMOD_NUMSTRINGS_MAXSIZE in > runtime/rsyslog.h on line 63. > > The limit is defined to 3 by default whereas I need support for > (potentially) 4 templates. > > Incremeting the value fixed the problem. > sorry, I got unexpectdly side-stepped.
I think I'll also increase the setting in the official version. HOWEVER: didn't you get an error return when setting the 4th template (it should do so, as the number is too high). Sorry if you already mentioned that, I am skimming through a lot of mails now ;) Rainer > Have a nice day :) > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
